Expand Events

Expand Events (expand-events)

expand a single JSON document into multiple JSON events.

Transform json

Minimal example

actions:
  - expand-events:
      skip-list: []

JSON

{
  "actions": [
    {
      "expand-events": {
        "skip-list": []
      }
    }
  ]
}

Contents

• Minimal example

• Fields

• General

• Warnings

• Input

• Output

Fields

Field	Type	Required	Description
skip-list Output	regex[] (string)	✅	JSON Pointer patterns (regex) to skip flattening when event-expand. Examples: \d+[A-Z]*
description General	string		describe this step.
condition General	lua-expression (string)		Only run this action if the specified condition is met. Examples: 2 * count()
suppress-warnings Warnings	boolean (bool)		Suppress warnings generated by this action.
input-field Input	field (string)		Field containing the payload to expand. Examples: data_field
remove Output	boolean (bool)		Remove the source field after expansion.
output-split-field Output	field (string)		Field used to emit each expanded record. Examples: data_field
exclude-non-empty-arrays Output	boolean (bool)		Exclude all arrays that are not empty after expansion.

General

Show fields

Field	Type	Required	Description
description	string		describe this step.
condition	lua-expression (string)		Only run this action if the specified condition is met. Examples: 2 * count()

Warnings

Show fields

Field	Type	Required	Description
suppress-warnings	boolean (bool)		Suppress warnings generated by this action.

Input

Show fields

Field	Type	Required	Description
input-field	field (string)		Field containing the payload to expand. Examples: data_field

Output

Show fields

Field	Type	Required	Description
skip-list	regex[] (string)	✅	JSON Pointer patterns (regex) to skip flattening when event-expand. Examples: \d+[A-Z]*
remove	boolean (bool)		Remove the source field after expansion.
output-split-field	field (string)		Field used to emit each expanded record. Examples: data_field
exclude-non-empty-arrays	boolean (bool)		Exclude all arrays that are not empty after expansion.